Passive Subdomain Enumeration
Passive Infrastructure Identification
Active Infrastructure Enumeration
Active Subdomain Enumeration
Virtual Hosts
Crawling
Wordlists